Implementing and Administering AD DS Sites and Replication

Module 4
Implementing and administering

AD DS sites and replication
Module Overview
Overview of AD DS replication
Configuring AD DS sites
Configuring and monitoring AD DS replication
Lesson 1: Overview of AD DS replication
What are AD DS partitions?

Characteristics of AD DS replication
How AD DS replication works within a site
Resolving replication conflicts
How replication topology is generated
How SYSVOL replication works
What are AD DS partitions?
Configuration Forest-wide information about the

AD DS structure
Forest-wide definitions and rules for

Schema creating and manipulating objects
and attributes
Information about domain-specific
Domain objects
Information about applications

Application
AD DS database
Characteristics of AD DS replication
Multi-master replication ensures:
Accuracy (integrity)
Consistency (convergence)
Performance (keeping replication traffic to a reasonable level)
Key characteristics of AD DS replication include:
Multi-master replication
Pull replication
Store-and-forward replication
Partitions
Automatic generation of an efficient, robust replication topology
Attribute-level and multivalue replication
Distinct control of intersite replication
Collision detection and management
How AD DS replication works within a site
Intrasite replication uses:

Connection objects for inbound replication to a domain
controller
Knowledge Consistency Checker to automatically create a
topology that is efficient (maximum three-hop) and robust
(two-way)
Notifications in which the domain controller tells
its downstream partners that a change is available
Polling, in which the domain controller checks with
its upstream partners for changes:
Downstream domain controller
directory replication agent DC02
DC01
replicates changes
Changes to all partitions held by DC03
both domain controllers are replicated
Resolving replication conflicts
In multi-master replication models, replication

conflicts arise when:
The same attribute is changed on two domain controllers
simultaneously
An object is moved or added to a deleted container on
another domain controller
Two objects with the same relative distinguished name are
added to the same container on two different domain
controllers
To resolve replication conflicts, AD DS uses:

Version number
Time stamp
Server GUID
How replication topology is generated
Global A1 A2
B2
catalog
server
B1
Domain
controllers
in another
domain
Global
catalog
server
A3 A4
Global B3
Domain A topology
catalog
Domain B topology
server
Schema and configuration
topology
Global catalog replication
How SYSVOL replication works
SYSVOL contains logon scripts, Group Policy templates, and

GPOs with their content
SYSVOL replication can take place by using:
FRS, which is primarily used in Windows Server 2003 and
older domain structures
DFS Replication, which is used in Windows Server 2008 and
newer domains
To migrate SYSVOL replication from FRS to DFS Replication:
The domain functional level must be at least Windows
Server 2008
Use the Dfsrmig.exe tool to perform the migration
Lesson 2: Configuring AD DS sites
What are AD DS sites?

Why implement additional sites?
Demonstration: Configuring AD DS sites
How replication works between sites
What is the ISTG?
Overview of SRV records
How client computers locate domain controllers
within sites
Moving domain controllers between sites
What are AD DS sites?
Sites identify network locations with fast, reliable network

connections
Sites are associated with subnet objects
Sites are used to manage:
Replication when domain controllers are separated by slow,
expensive links
Service localization:
Domain controller authentication
AD DSaware (site-aware)
services or applications
A1
A2
Site A
Site B
Why implement additional sites?
Create additional sites when:

A slow link separates a part of the network
A part of the network has enough users to warrant hosting
domain controllers or other services in that location
You want to control service localization
You want to control replication between domain controllers
A1
A1
Site B
A2 A2
A3
Site A
Demonstration: Configuring AD DS sites
In this demonstration, you will see how to configure

AD DS sites
How replication works between sites
Replication Replication within sites:

A1 Assumes fast, inexpensive, and
highly reliable network links
A2
Does not compress traffic
Uses a change notification
mechanism
Replication between sites:
Replication Assumes higher cost, limited
A1 bandwidth, and unreliable network
A2 links
Has the ability to compress
replication
B1 Replication Occurs on a configured schedule
B2 Can be configured for immediate
and urgent replications
What is the ISTG?
ISTG defines the replication between AD DS sites on a network
Replication
ISTG
Replication
Site link
ISTG
Overview of SRV records
Domain controllers register SRV records as follows:

_tcp.adatum.com: All domain controllers in the domain
_tcp.sitename._sites.adatum.com: All services in a specific site
Clients query DNS to locate services in specific sites
How client computers locate domain controllers
within sites
The process for locating a domain controller is as follows:
1. The new client queries for all domain controllers in the domain
2. The client attempts an LDAP ping to find all domain controllers
3. First domain controller responds
4. The client queries for all domain controllers in the site
5. The client attempts an LDAP ping to find all domain controllers in the
site
6. The client forms an affinity
Moving domain controllers between sites
Site B
Site A
Lesson 3: Configuring and monitoring AD DS
replication
What are AD DS site links?

What is site link bridging?
What is universal group membership caching?
Managing intersite replication
Demonstration: Configuring AD DS intersite
replication
Tools for monitoring and managing replication
What are AD DS site links?
Site links contain sites:

Within a site link, a connection object can be created
between any two domain controllers
The default site link, DEFAULTIPSITELINK, is not always
appropriate with your network topology
SEA SEA
HQ-SEA
Site-link
BEIJING AMS BEIJING

HQ HQ AMS
DEFAULTIPSITELINK
What is site link bridging?
By default, automatic site link bridging:

Enables ISTG to create connection objects between site
links
Allows disabling of transitivity in the properties of the IP
transport
Site link bridges:
Enable you to create transitive site
SEA
links manually
HQ-SEA Site link
SEA
Are useful only when transitivity site link bridge
is disabled
BEIJING HQ AMS
BEIJING AMS
HQ-BEIJING HQ-AMS
site link site link
What is universal group membership caching?
Universal group membership caching enables

domain controllers in a site with no global catalog
servers to cache universal group membership
Global
catalog
Bridgehead
server
server
IP subnets
Bridgehead
server
IP subnets
Site link costs:

Replication uses connections with the lowest cost
Replication:
During polling, the downstream bridgehead polls its
upstream partners:
Default is 3 hours
Minimum is 15 minutes
Recommended is 15 minutes
Replication schedules:
24 hours a day
Can be scheduled
Demonstration: Configuring AD DS intersite replication
In this demonstration, you will see how to configure

AD DS intersite replication
Tools for monitoring and managing replication
Repadmin.exe examples:
repadmin /showrepl Lon-dc1.adatum.com
repadmin /showconn Lon-dc1 adatum.com
repadmin /showobjmeta Lon-dc1 "cn=Linda Miller,ou="
repadmin /kcc
Dcdiag.exe /test:testName:
FrsEvent or DFSREvent
Intersite
KccEvent
Replications
Topology
Monitor replication with Operations Manager

Use Windows PowerShell cmdlets
Lab: Implementing AD DS sites and replication
Exercise 1: Modifying the default site

Exercise 2: Creating additional sites and subnets
Exercise 3: Configuring AD DS replication
Exercise 4: Monitoring and troubleshooting AD DS
replication
Logon Information
Virtual machines: 20742B-LON-DC1
20742B-TOR-DC1
User name: Adatum\Administrator
Password: Pa55w.rd
Estimated Time: 45 minutes

Lab Scenario
A. Datum Corporation has deployed a single

AD DS domain, with all the domain controllers
located in the London datacenter. As the company
has grown and added branch offices with large
numbers of users, it has become apparent that the
current AD DS environment does not meet the
companys requirements. Users in some branch
offices report that it can take a long time for them
to sign in to their computers. Access to network
resources such as the companys servers, which
are running Microsoft Exchange Server 2016 and
Microsoft SharePoint Server 2016, can be slow,
and they sporadically fail.
Lab Scenario
As one of the senior network administrators, you

are responsible for planning and implementing an
AD DS infrastructure that will help address the
organizations business requirements. You are
responsible for configuring AD DS sites and
replication to optimize the user experience and
network utilization within the organization.
Lab Review
You decide to add a new domain controller

named LON-DC2 to the LondonHQ site. How can
you ensure that LON-DC2 passes all replication
traffic to the Toronto site?
You have added a new domain controller named
LON-DC2 to the LondonHQ site. Which AD DS
partitions will be modified as a result?
In the lab, you created a separate site link for the
Toronto and TestSite sites. Are there other steps
you might need to take to ensure that LondonHQ
does not automatically create a connection object
directly with the TestSite site?
Module Review and Takeaways
Best Practice
Common Issues and Troubleshooting Tips
Review Questions
Tools

Implementing and Administering AD DS Sites and Replication

Uploaded by

Copyright:

Available Formats

Implementing and Administering AD DS Sites and Replication

Uploaded by

Document Information

Original Description:

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Implementing and Administering AD DS Sites and Replication

Uploaded by

Copyright:

Available Formats

Module 4

Implementing and administering

What are AD DS partitions?

Configuration Forest-wide information about the

Forest-wide definitions and rules for

Information about applications

Multi-master replication ensures:

Intrasite replication uses:

In multi-master replication models, replication

To resolve replication conflicts, AD DS uses:

SYSVOL contains logon scripts, Group Policy templates, and

What are AD DS sites?

Sites identify network locations with fast, reliable network

Create additional sites when:

In this demonstration, you will see how to configure

Replication Replication within sites:

ISTG defines the replication between AD DS sites on a network

Domain controllers register SRV records as follows:

What are AD DS site links?

Site links contain sites:

BEIJING AMS BEIJING

By default, automatic site link bridging:

Universal group membership caching enables

Site link costs:

In this demonstration, you will see how to configure

Monitor replication with Operations Manager

Exercise 1: Modifying the default site

Estimated Time: 45 minutes

A. Datum Corporation has deployed a single

As one of the senior network administrators, you

You decide to add a new domain controller

You might also like